$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft File: NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft (raw, json) Hash identifier: bW+jBzvUOfkYx0LjEcBZv/usbJLotdliUMaPdDh+vFE= Subject key identifier: 89:E3:65:DA:92:8D:C3:04:AD:63:8D:41:08:4C:A4:8B:25:15:4C:89 Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Certificate serial: 1297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft Manifest number: 1265 Signing time: Wed 22 Jul 2026 17:14:38 +0000 Manifest this update: Wed 22 Jul 2026 17:14:38 +0000 Manifest next update: Wed 29 Jul 2026 17:14:38 +0000 Files and hashes: 1: NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl (hash: UEHEMJkUXzDuVbRwg3T7qKEAb08ath0an1S3cr5G1SM=) 2: 7F7F1470091D11F0B7E95627C4F9AE02.roa (hash: f+/uDtECPh4z9lUgGecamZwBqy/HTP1IaGpVkdXlDqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4759 (0x1297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Validity Not Before: Jul 22 17:14:38 2026 GMT Not After : Jul 29 17:14:38 2026 GMT Subject: CN=6a60fa7e-b683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:32:de:9b:5d:e3:9b:5d:fc:09:1b:40:07:58: 61:7d:0b:ec:9a:d5:f2:de:9a:8a:66:66:32:28:2a: 96:17:d6:cb:8c:46:f4:b5:0d:71:7e:0f:57:11:1b: 7c:c0:55:77:4e:a0:0f:d3:f9:13:ce:49:24:45:e5: 0a:89:19:7a:1a:4c:3a:48:03:27:39:1b:06:c4:31: fb:19:5b:a5:80:e1:e0:60:a1:e1:45:b0:19:ff:fc: 84:f0:90:0e:07:9b:9b:27:fe:3a:1a:82:15:79:41: 51:1f:8f:30:43:8e:29:8f:1f:95:bf:a5:7b:24:d4: a4:96:bf:50:c0:33:18:9d:97:03:b3:d2:a7:ac:23: 38:6f:2c:3a:a9:2e:db:a6:fc:10:db:b9:a0:94:32: a9:97:66:3b:3c:64:8b:ac:c4:98:d1:90:e0:cf:08: e4:0a:4d:ea:35:38:b9:fe:99:4f:8a:31:ee:b1:de: 62:f1:e5:c0:e3:3a:ac:32:00:bd:df:d6:a3:81:c0: 46:39:d3:1a:38:fb:e5:b9:a3:fc:d6:92:6a:ad:fd: 87:c3:71:e4:65:2c:d9:01:48:aa:55:24:97:cd:8d: 42:53:e2:9f:d8:24:6c:95:f6:3c:dc:3a:08:59:21: e4:df:fa:83:6f:26:cb:b5:4f:d1:b6:07:46:f1:28: e1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E3:65:DA:92:8D:C3:04:AD:63:8D:41:08:4C:A4:8B:25:15:4C:89 X509v3 Authority Key Identifier: keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c1:7d:45:c8:6a:e3:1b:f1:54:5b:a3:43:47:87:b4:14:19: 82:88:17:6d:6f:9b:9c:b9:f4:70:cb:1d:e9:0f:2b:c0:ba:19: ff:be:bb:7d:41:b8:25:26:f1:d7:3c:c9:d3:24:37:e6:8d:11: 7b:e9:1f:bb:47:58:0d:d9:19:68:e0:83:57:b9:38:b0:16:24: 1c:e6:a2:a3:05:bc:ae:3e:7e:d1:53:63:d0:57:89:94:65:66: a6:84:a6:35:7e:12:a4:39:05:1d:da:cc:e5:10:29:be:e6:3f: 64:0e:59:c6:07:03:84:bc:a1:a0:c0:e1:69:6e:e0:50:46:b6: 5e:61:d8:f6:f2:04:7b:65:7e:31:1d:5d:51:18:a9:e7:fb:ab: a8:29:3a:a3:a1:d9:db:37:fd:a6:80:b3:4b:57:c3:43:8b:63: b6:44:27:5f:57:ec:2e:79:e7:fc:0b:df:cb:be:4f:c6:77:e7: 33:99:50:b6:41:dc:26:b6:cb:5c:c6:00:d9:36:9e:8e:b0:8c: 04:7d:7f:5c:b2:c8:06:39:fc:96:03:c9:09:9c:05:88:94:80: 90:97:1a:2b:2f:9a:d9:48:a0:36:25:a2:0d:e7:55:f3:ac:c2: 4a:a7:c2:47:99:23:91:94:26:b5:f5:f5:5f:92:65:58:1b:e7: ca:24:02:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZCRUExNzVFOERF ODJCRDQzOUEwHhcNMjYwNzIyMTcxNDM4WhcNMjYwNzI5MTcxNDM4WjAYMRYwFAYD VQQDEw02YTYwZmE3ZS1iNjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDLem13jm138CRtAB1hhfQvsmtXy3pqKZmYyKCqWF9bLjEb0tQ1xfg9XERt8 wFV3TqAP0/kTzkkkReUKiRl6Gkw6SAMnORsGxDH7GVulgOHgYKHhRbAZ//yE8JAO B5ubJ/46GoIVeUFRH48wQ44pjx+Vv6V7JNSklr9QwDMYnZcDs9KnrCM4byw6qS7b pvwQ27mglDKpl2Y7PGSLrMSY0ZDgzwjkCk3qNTi5/plPijHusd5i8eXA4zqsMgC9 39ajgcBGOdMaOPvluaP81pJqrf2Hw3HkZSzZAUiqVSSXzY1CU+Kf2CRslfY83DoI WSHk3/qDbybLtU/RtgdG8SjhhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFInjZdqS jcMErWONQQhMpIslFUyJMB8GA1UdIwQYMBaAFDcSc8/YwskItpHWvqF16N6CvUOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DRUUzRDcxODA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lRaTJrZGEtb1hYbzNvSzlR NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054Snp6OWpDeVFpMmtkYS1vWFhvM29LOVE1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DRUUzRDcxODA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lR aTJrZGEtb1hYbzNvSzlRNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmsF9Rchq4xvxVFujQ0eHtBQZgogXbW+bnLn0cMsd6Q8rwLoZ/767fUG4JSbx 1zzJ0yQ35o0Re+kfu0dYDdkZaOCDV7k4sBYkHOaiowW8rj5+0VNj0FeJlGVmpoSm NX4SpDkFHdrM5RApvuY/ZA5ZxgcDhLyhoMDhaW7gUEa2XmHY9vIEe2V+MR1dURip 5/urqCk6o6HZ2zf9poCzS1fDQ4tjtkQnX1fsLnnn/Avfy75PxnfnM5lQtkHcJrbL XMYA2TaejrCMBH1/XLLIBjn8lgPJCZwFiJSAkJcaKy+a2UigNiWiDedV86zCSqfC R5kjkZQmtfX1X5JlWBvnyiQCmQ== -----END CERTIFICATE-----Generated at Fri Jul 24 17:50:08 2026 by rpki-client